2605 matches found
CBM
Car Backdoor Maker Car Backdoor Maker는 The Bicho에 공격 템플릿을 만들고 로드하기 위한 소프트웨어입니다. 시작하기 전에 The Bicho 하드웨어 구하는 방법을 읽어주세요. 스크린샷 설치 및 사용법 이 프로젝트에는 위키가 있으며, 다음 유용한 문서를 찾을 수 있습니다: 설치 소스 코드에서 컴파일 Linux에서 실행 Windows에서 실행 The Bicho에 연결 기본 설정 CAN 프레임 설정 공격 템플릿 저장 공격 템플릿 복원 고급 설정 전화번호 필터 중지 명령 고급 기능 ECU 종료 프레...
Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated settings import/export
includes/options.php in the motors-car-dealership-classified-listings aka Motors - Car Dealer & Classified Ads plugin through 1.4.0 for WordPress allows unauthenticated options changes. id: CVE-2019-17228 info: name: Motors Car Dealer & Classified Ads = 1.4.0 - Unauthenticated settings...
Sourcecodester Car Rental Management System 1.0 - Stored Cross-Site Scripting
Sourcecodester Car Rental Management System 1.0 is vulnerable to cross-site scripting via the vehicalorcview parameter. id: CVE-2021-46005 info: name: Sourcecodester Car Rental Management System 1.0 - Stored Cross-Site Scripting author: cckuailong severity: medium description: Sourcecodester Car...
Car Rental Management System 1.0 - SQL Injection
Car Rental Management System 1.0 contains an SQL injection vulnerability via /admin/manageuser.php?id=. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id: CVE-2022-32028...
Car Rental Management System 1.0 - Local File Inclusion
Car Rental Management System 1.0 allows an unauthenticated user to perform a file inclusion attack against the /index.php file with a partial filename in the "page" parameter, leading to code execution. id: CVE-2020-29227 info: name: Car Rental Management System 1.0 - Local File Inclusion author:...
Carpunk
carpunk CAN Injection | 자동차 해킹 툴킷 🚀 새로운 기능 Carpunk는 원래의 CANghost에서 진화한 고급 CAN Injection 툴킷입니다. 인터페이스 제어, 기본 스니핑 및 CAN 인젝션 취약점을 포함한 새로운 기능을 도입합니다. ✅ 시뮬레이션 및 실제 자동차와 호환 가능 🛠️ 두 가지 새로운 CAN 인젝션 공격 추가 🧪 Ubuntu 및 Parrot OS에서 테스트 완료 ⚠️ Carpunk 실행 전 중요 참고 사항 CAN 드라이버 로드 : CAN 버스 드라이버가 수동으로 로드되었는지 확인하십시오...
rollback_car_attack_proverif
ロールバック攻撃の形式検証 1で発表された、カーキーフォブに対するロールバック攻撃(CVE-2022-37418、CVE-2022-36945、CVE-2022-37305)のProVerifによる概念実証 免責事項 私は1の著者とは一切関係ありません。彼らが論文をオープンアクセスにしてくれたことに感謝します。 ProVerifのインストール 公式の方法 ProVerifの形式検証PoCを実行するには、まず公式ページの指示に従ってProVerifをインストールしてください。 ビルド済みバイナリ...
CVE-2021-46005
CVE-2021-46005 CVE-2021-46005の詳細 ソフトウェア: Online Car Rental System 1.0 ソフトウェアリンク: https://www.sourcecodester.com/cc/14145/online-car-rental-system-using-phpmysql.html 脆弱性タイプ: 格納型クロスサイトスクリプティング(Stored Cross Site Scripting) 影響を受けるコンポーネント: post-avehicalページのvehicalorcview サービス拒否(DoS)への影響: あり コード実行への影響...
CVE-2024-57487-and-CVE-2024-57488
オンラインカー・レンタルシステムの脆弱性 このリポジトリには、Code-Projects Online Car Rental System プロジェクト バージョン 1.0 で特定された脆弱性の詳細が含まれています。これらの脆弱性には CVE が割り当てられており、問題の理解と緩和に役立つ包括的なライトアップが含まれています。 脆弱性 1. ファイルアップロードによるリモートコード実行(認証済み) CVE-ID: CVE-2024-57487 説明: この脆弱性により、認証済みの攻撃者が悪意のある PHP ファイルをアップロードし、サーバー上でリモートコマンド実行を可能にします。...
CVE-2024-53345
CVE-2024-53345 Car Rental Management System バージョン 1.0〜1.3 における重大な 0 Day 脆弱性 説明: Car Rental Management System(バージョン 1.0〜1.3)の System Settings モジュールのファイルアップロード機能に重大な脆弱性が存在し、低権限ユーザーが実行可能な PHP...
EUVD-2026-82494
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized access of data due to missing authorization checks in mvlajaxdealerloadcars function in all versions up to, and including, 1.4.120. This makes it possible for unauthenticated attackers to...
CVE-2026-16750 Motors – Car Dealership & Classified Listings <= 1.4.120 - Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings Exposure
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized access of data due to missing authorization checks in mvlajaxdealerloadcars function in all versions up to, and including, 1.4.120. This makes it possible for unauthenticated attackers to...
CVE-2026-16750 Motors – Car Dealership & Classified Listings <= 1.4.120 - Missing Authorization to Unauthenticated Private/Draft/Password-Protected Listings Exposure
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized access of data due to missing authorization checks in mvlajaxdealerloadcars function in all versions up to, and including, 1.4.120. This makes it possible for unauthenticated attackers to...
CVE-2026-91016 Motors < 1.4.121 - Unauthenticated Draft/Private Listing Disclosure
The Motors WordPress plugin before 1.4.121 does not verify that a request is authorized to view a user's non-published listings before returning them, allowing unauthenticated attackers to read any author's draft, pending and private car listings - including titles, prices, media URLs and seller...
CVE-2026-16750: Missing Authorization
The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized access of data due to missing authorization checks in mvlajaxdealerloadcars function in all versions up to, and including, 1.4.120. This makes it possible for unauthenticated attackers to...
VulnCheck KEV: CVE-2022-32025
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/viewcar.php?id=...
VulnCheck KEV: CVE-2022-32028
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manageuser.php?id=...
VulnCheck KEV: CVE-2022-32026
Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/managebooking.php?id=...